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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims: 

1-14. (Cancelled) 

15. (Previously Presented) The method of claim 34, wherein at least one of 
said operations in the first chain of operations comprises an exclusive OR. 

16. (Currently Amended) The method of claim 34, wherein at least one of 
said operations in the first chain of operations comprises an operation of bit permutation of 
an intermediate result obtained from execution of an operation op e rat i ons of said first chain 
of operations preceding said operation of bit permutation within said first chain of operations . 

17. (Previously Presented) The method of claim 34, wherein at least one of 
said operations in the first chain of operations comprises an operation of indexed access to a 
table. 

18. (Previously Presented) The method of claim 34, wherein at least one of 
said operations in the first chain of operations comprises an operation which is stable with 
respect to the application of an exclusive OR function. 

19. (Currently amended) The method of claim 34, wherein at least one of 
said operations in the first chain of operations comprises an operation of transfer of an 
intermediate result obtained from execution of an operation oporat i ons of said second chain 
of operations preceding said operation of transfer within said second chain of operations , 
from one location to another one in a storage space. 

20. (Cancelled) 

21 . (Cancelled) 
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22. (Currently amended) The method of claim 34, wherein the step of 
randomly choosing comprises generating a random parameter that is used to identify which 
of said groups to choose, and wherein said method further comprises updating a 
complementation counter at each generation of the random parameter, and the selection in 
the step of outputting as tho a resultant message to output the result of the last operation in 
either an uncompleted state or in a complemented state is made doc i dod depending on a 
state of the complementation counter to dotorm i no whothor to output tho resu l t of tho l ast 
operat i on i n tho uncomp l omontod stato or tho comp l omontod stato as tho resu l tant 

23. (Currently amended) The method of claim 34, wherein the step of 
randomly choosing comprises generating a random parameter that is used to identify which 
of said groups to choose, and wherein said method further comprises updatinq transm i tt i nq , 
in parallel with each executed operation, information to be used during the step of outputting 
the resultant message to determine whether to output the result of the last operation in the 
uncomplemented state or the complemented state as the resultant message. 

24. (Previously Presented) The method of claim 34, wherein the step of 
randomly choosing comprises a step of computing a parameter which is equal to a 
difference between a number of times when an operation of the first chain of operations is 
executed and a number of times when an operation of the second chain of operations is 
executed, and when the difference exceeds a given threshold, the step of randomly 
choosing is conducted so as to decrease the difference. 

25. - 26. (Cancelled) 

27. (Currently amended) The method of claim 34, wherein the step of 
storing, at the microcircuit card, a second set of instructions for a second chain of operations 
comprises storing instructions for a succession of operations each corresponding to a 
complement byte by byte of one respective comp le m e nt i ng e ach operation in the first chain 
of operations by a comp l omontat i on carr i ed out byte by byte . 
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28. (Currently amended) The method of claim 34, wherein the step of 
storing, at the microcircuit card, a second set of instructions for a second chain of operations 
comprises storing instructions for a succession of operations each corresponding to a 
complement bit by bit of one respective comp l omont i ng oach operation in the first chain of 
operations by a comp l omontat i on carr i od out b i t by b i t . 

29. (Currently Amended)The method of claim 34, wherein the step of storing 
a second step of instructions for hav i ng tho m i croc i rcu i t card dotorm i no the second chain of 
operations further comprises a step of applying dotorm i n i ng a permutation of the order of 
successive commutative operations in the first chain of operations before storing said 
second step of instructions . 

30. (Previously Presented) The method of claim 29, wherein the step of 
determining a permutation of the order of successive commutative operations is carried out 
randomly. 

31 . (Currently amended) The method of claim 34, wherein the step of 
identifying comprises a step of determining the plurality of operations in said third group, this 
step of determining further comprising random l y so l oct i ng at l oast ono of tho oporat i ons i n tho 
f i rst cha i n of operat i ons and at l oast ono of tho operat i ons i n tho second cha i n of operat i ons 
compr i sos generating a random parameter before each selection of an operation from either 
the first chain of operations or from the second chain of operations i s so l octod and updating 
a complementation counter, and the step of outputting as-the resultant message includes 
deciding to output the result of the last operation in the uncomplemented state or in the 
complemented state i s d e c i d e d depending of a state of the complementation counter-te 
dotorm i no whether to output tho resu l t of tho l ast operat i on i n tho uncomp l omontod stato or 
tho comp l omontod stato as tho resu l tant mossago . 
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32. (Currently amended) The method of claim 34, wherein the step of 
identifying comprises a step of determining the plurality of operations in said third group, this 
step of determining further comprising random l y so l oct i ng at l oast ono of tho oporat i ons i n 
the f i rst cha i n of operat i ons and at l east one of the operat i ons i n the second cha i n of 
oporat i ons compr i ses generating a random parameter before each selection of an operation 
from either the first chain of operations or the second chain of operations i s so l octod and 
wherein said method further comprises updating transm i tt i ng , in parallel with each oxocutod 
operation, information to be used during the step of outputting the resultant message to 
determine whether to output the result of the last operation in the uncomplemented state or 
the complemented state as the resultant message. 

33. (Currently amended) The method of claim 34, wherein the step of 
identifying comprises a step of determining the plurality of operations in said third group, this 
step of determining comprising random l y so l oct i ng at l oast ono of tho oporat i ons i n sa i d f i rst 
cha i n of oporat i ons and at l oast ono of tho oporat i ons i n sa i d second cha i n of oporat i ons 
compr i s e s a step of computing a parameter which is equal to a difference between a number 
of times when an operation of the first chain of operations is executed and a number of times 
when an operation of the second chain of operations is executed, and when the difference 
exceeds a given threshold, tho stop of random l y so l oct i ng a next operation to be included in 
the selected chain of operations is selected from either of tho of the first chain of operations 
or the second chain of operations i s conducted so as to decrease this difference. 

34 (Currently amended) A method of executing and validating a 
cryptographic protocol between a server entity and a microcircuit card in order to resist a 
DPA attack against the microcircuit card during execution of said cryptographic protocol, 
said method comprising the steps of: 

storing a first set of instructions for a first chain of operations in both the 
server entity and the microcircuit card, said first chain of operations forming a data 
encryption method standard , 
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storing, at the microcircuit card, a second set of instructions for a second 
chain of operations based on the first chain of operations stored in said microcircuit card, 
said second chain of operations comprising a succession of operations each corresponding 
to a complement of one respective operation of sa i d operat i ons in the first chain of 
operations, 

sending a message from said server entity to said microcircuit card, 

executing, at the server entity, said first set of instructions for the first chain of 
operations stored therein using said message to obtain a server result, 

identifying, in the microcircuit card, a selected chain of operations, said step 
of identifying comprising randomly choosing one of the following groups as said selected 
chain: 1) all of the operations in said first chain of operations; 2) all of the operations in said 
secondf ifst chain of operations; or 3) a plurality of operations comprising a random selection 
of at least one of the operations in said first chain of operations and at least one of the 
operations in said second chain of operations, said plurality of operations comprising, for 
each operation of the first chain of operations, either this operation or the respective 
operation in the second chain of operations, 

executing, in the microcircuit card, instructions for the identified chain of 
operations on said message, 

outputting a result of a last operation executed in said identified chain of 
operations either in an uncomplemented state or a complemented state as a resultant 
message, 

comparing the resultant message to the server result, and 
validating the cryptographic protocol between the server entity and the 
microcircuit card when the server result and the resultant message are identical. 
35. (Cancelled) 



